Apparatus and method to securely receive a key

• US 9,973,485 B2
• Filed: 04/13/2017
• Issued: 05/15/2018
• Est. Priority Date: 09/16/2015
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Keidar, Ron
• Primary Examiner(s): Zhao, Don G
• Application Number:
  US15/486,673
• Publication Number:
  US 20170222994A1
• Time in Patent Office: 397 Days
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

Disclosed is a device that obtains and stores a secret key. The device may comprise a transceiver configured to: transmit a command for a secret key to a server; transmit an identifier to the server; and receive a wrapped secret key from the server. The device may further comprise: a storage device; and a processor. The processor may be coupled to the transceiver and the storage device and the processor may be configured to: receive the wrapped secret key from the transceiver; unwrap the wrapped secret key to obtain the secret key; and store the secret key in the storage device.

Claims

1. A device comprising:

a transceiver configured to;

transmit a request for a secret key to a server;

transmit an identifier comprising at least one of a device serial number or a manufacturer identifier to the server;

receive a wrapped secret key from the server;

a storage device; and

a processor coupled to the transceiver and the storage device, the processor configured to;

receive the wrapped secret key from the transceiver;

unwrap the wrapped secret key to obtain the secret key, wherein unwrapping the wrapped secret key further comprises utilizing a key derivation function with the wrapped secret key and the identifier as inputs; and

store the secret key in the storage device.

2. The device of claim 1, wherein the identifier further comprises at least one of an identifier of a command processor or a global key.

3. The device of claim 1, wherein a first software operation by the processor commands the secret key from the server.

4. The device of claim 3, wherein a second software operation by the processor commands unwrapping the wrapped secret utilizing the key derivation function implemented by a key derivation device and storing the secret key in the storage device.

5. The device of claim 4, wherein the server utilizes a key derivation function to generate the wrapped secret key that is linked to the key derivation function of the device.

6. The device of claim 1, wherein the storage device is a one-time programmable (OTP) memory or a ROM.

7. A method comprising:

transmitting a request for a secret key to a server;

transmitting an identifier comprising at least one of a device serial number or a manufacturer identifier to the server;

receiving a wrapped secret key from the server;

unwrapping the wrapped secret key to obtain the secret key, wherein unwrapping the wrapped secret key further comprises utilizing a key derivation function with the wrapped secret key and the identifier as inputs; and

storing the secret key in a storage device.

8. The method of claim 7, wherein the identifier further comprises at least one of an identifier of a command processor or a global key.

9. The method of claim 7, further comprising a first software operation that commands the secret key from the server.

10. The method of claim 9, further comprising a second software operation that commands:

unwrapping the wrapped secret utilizing the key derivation function implemented by a key derivation device; and

storing the secret key in the storage device.

11. The method of claim 10, wherein the server utilizes a key derivation function to generate the wrapped secret key that is linked to the key derivation function.

12. The method of claim 7, wherein the storage device is a one-time programmable (OTP) memory or a ROM.

13. A non-transitory computer-readable medium including code that, when executed by a processor of a device, causes the processor to:

transmit a request for a secret key to a server;

transmit an identifier comprising at least one of a device serial number or a manufacturer identifier to the server;

receive a wrapped secret key from the server;

unwrap the wrapped secret key to obtain the secret key, wherein unwrapping the wrapped secret key further comprises utilizing a key derivation function with the wrapped secret key and the identifier as inputs; and

store the secret key in a storage device.

14. The computer-readable medium of claim 13, wherein the identifier further comprises at least one of an identifier of a command processor or a global key.

15. The computer-readable medium of claim 13, further comprising code to command the secret key from the server.

16. The computer-readable medium of claim 15, further comprising code to:

unwrap the wrapped secret utilizing the key derivation function implemented by a key derivation device; and

store the secret key in the storage device.

17. The computer-readable medium of claim 16, wherein the server utilizes a key derivation function to generate the wrapped secret key that is linked to the key derivation function.

18. The computer-readable medium of claim 13, wherein the storage device is a one-time programmable (OTP) memory or a ROM.

19. A device comprising:

means for transmitting a request for a secret key to a server;

means for transmitting an identifier comprising at least one of a device serial number or a manufacturer identifier to the server;

means for receiving a wrapped secret key from the server;

means for unwrapping the wrapped secret key to obtain the secret key, wherein unwrapping the wrapped secret key further comprises utilizing a key derivation function with the wrapped secret key and the identifier as inputs; and

means for storing the secret key in a storage device.

20. The device of claim 19, wherein the identifier further comprises at least one of an identifier of a command processor or a global key.

21. The device of claim 19, further comprising means for commanding the secret key from the server.

22. The device of claim 21, further comprising means for:

unwrapping the wrapped secret utilizing the key derivation function implemented by a key derivation device; and

storing the secret key in the storage device.

23. The device of claim 22, wherein the server utilizes a key derivation function to generate the wrapped secret key that is linked to the key derivation function.

24. The device of claim 19, wherein the storage device is a one-time programmable (OTP) memory or a ROM.